We have our /home directories stored on a NetApp SVN, and are automounting them as NFSv4 with Kerberos. This seems to work flawlessly on RHEL7.x, however it will not work in Ubuntu 14.04 or 16.04 no matter what we try.
Both RHEL and Ubuntu are using SSSD and were joined to the same domain using realmd. I compared all the configs (krb5.conf, sssd.conf, resolv.conf, nsswitch.conf, idmapd.conf, all pam configs, etc) between RHEL and Ubuntu, and the settings are all identical.
I compared the installed pam, krb5, sssd, nfs etc packages in RHEL and have installed all the comparable packages on Ubuntu. All services have started successfully. Firewalls are completely disabled. Both RHEL and Ubuntu have SELinux disabled. Both have krb5.keytab files with the same service principals.
For some reason on the Ubuntu machines, when a user logs in, the sssd logs indicate that a service ticket is granted, but when you run a "klist" as that user only the TGT is listed.
With debugging on for autofs, on Ubuntu it shows:
attempting to mount entry /home/user
>> mount.nfs4: access denied by server while mounting 10.4.195.9:/NetAppSVM_Home/user
>> mount.nfs4: access denied by server while mounting 10.4.195.8:/NetAppSVM_Home/user
mount(nfs): nfs: mount failure files.uconn.edu:/NetAppSVM_Home/user on /home/user
failed to mount /home/user
Our /etc/auto.home on both RHEL and Ubuntu look like:
* -fstype=nfs4,sec=krb5,user=&,uid=$UID,gid=$GID,cruid=$UID files.univ.edu:/NetAppSVM_Home/&
Both machines are on the same subnet. Users are authenticated successfully, yet, for some reason, automounting the /home works on RHEL but not Ubuntu. I'd appreciate any direction here because at this point I'm just beating my head against the wall.
Thanks in advance!